d) It is important for the governments and/or regulators to prepare pool of technical experts to deal with cyber incidents, and dispatch them to the organizations under attack if necessary. 2-6-2 Disaster recovery and Business Continuity Planning (BCP) a) It is important for the governments and/or regulators to prepare disaster recovery plans in order to recover all the systems and services affected by the cyber incidents as soon as possible, and encourage CII owners/operators to do the same. b) Especially for their critical business functions identified in the section 2-1-b), it is important for the governments and/or regulators to develop business continuity plans in case there is a strong possibility the incident jeopardizes continuity of critical business functions. It is important for the governments and/or regulators to encourage CII owners/operators to develop their own business continuity plans for their critical business functions as well. c) For more details of BCP, see Appendix 2. 2-7 Cyber exercise 2-7-1 Significance of cyber exercise a) It is important to conduct cyber exercises to allow governments and/or regulators to confirm the effectiveness of the information sharing system mentioned in section 2-5, and also address the issues and areas to be improved in the current cyber incident response and management framework. 2-7-2 Government support for industry-level exercises in the private sector a) If private sector doesn’t sufficiently understand the significance of CIIP, or doesn’t have enough capability to plan and manage cyber exercises by themselves, the governments and/or regulators should at first enlighten them, and if necessary, should prepare the basic scenario and exercise. b) On the other hand, in countries with advanced cyber security level, there may be some industries in which domestic or global industry-level cyber exercises have been already conducted. In such case, it may be possible to have them manage cyber exercises themselves in order to increase their capability to take countermeasures for any incidents, and governments and/or regulators may provide a certain level of guidance and scenarios.